Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File:                     15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier:          xmTYAj+w0lPFCvtumfkUnNMs6M3UVzGG/52fKu7ELY0=
Subject key identifier:   08:68:75:1A:1F:5F:31:5A:D7:EA:0F:F0:2F:E1:EA:37:ED:62:20:2C
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer:       /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial:       0198D4E0808831DF2B59C63A3A42F4D4DEBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number:          0E4D
Signing time:             Sat 23 Aug 2025 03:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:19 +0000
Files and hashes:         1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: ffI44AL4LvAlKJn+SbJO36wIy4UYhLeRawpoO1iLytE=)
                          2: ZllkD09XX0UjmpDgviQyHJhN0tQ.roa (hash: cXj6wMyOUxluunshyfWaumFrSwMD+oIYxgPqs4SCj1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:80:88:31:df:2b:59:c6:3a:3a:42:f4:d4:de:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
        Validity
            Not Before: Aug 23 03:02:19 2025 GMT
            Not After : Aug 24 03:02:19 2025 GMT
        Subject: CN=0868751a1f5f315ad7ea0ff02fe1ea37ed62202c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:d4:20:df:a2:30:f3:51:34:31:53:64:2c:
                    a8:df:45:13:39:0b:96:1e:59:f4:d4:c3:cb:5d:e4:
                    e9:ce:9d:57:5e:e7:d8:2d:df:6a:74:62:a2:99:8e:
                    14:e5:a8:bd:f7:24:04:a6:6e:a6:37:26:71:d1:a8:
                    d1:f9:91:72:0c:e9:b4:37:cb:c7:c4:17:68:5f:65:
                    38:6d:1b:fa:dd:16:33:fe:5a:19:b9:19:bb:c3:f8:
                    a7:99:63:d5:68:9e:8b:71:5f:b1:87:e2:42:3d:f0:
                    85:20:44:0a:af:c4:97:49:e1:16:b8:7c:8a:9e:66:
                    06:3f:28:e0:9d:30:a7:09:d3:c1:7f:93:40:86:79:
                    15:67:98:2e:07:0d:f2:c3:83:1b:27:8e:7c:23:e0:
                    88:a1:94:2c:8b:b5:b4:54:41:af:fb:1f:7b:17:9c:
                    d1:83:fd:50:f5:56:81:92:2c:ce:64:36:77:1b:ea:
                    e3:c0:b8:a9:ca:e2:97:ba:73:61:cd:5a:15:27:27:
                    2f:14:f0:d7:5c:d2:e4:38:2d:2a:b0:a2:64:92:90:
                    90:be:a1:d4:e7:0a:e2:7b:96:54:3d:9a:e2:13:8b:
                    da:e1:8d:0d:93:e0:00:dc:ac:94:bf:aa:42:11:29:
                    90:3e:58:cc:e8:b9:6a:66:68:0c:08:72:7d:de:3f:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:68:75:1A:1F:5F:31:5A:D7:EA:0F:F0:2F:E1:EA:37:ED:62:20:2C
            X509v3 Authority Key Identifier:
                keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:d2:6c:ac:77:33:30:5f:e5:97:d6:88:10:d1:7a:03:72:
         97:8f:1b:3b:d5:ba:22:22:bc:b1:31:74:fb:f8:f7:d5:60:b2:
         7c:87:04:4e:c1:3f:39:f1:5c:05:e4:1a:0d:0a:ea:2c:f8:83:
         34:04:ab:94:04:fd:5f:8b:ba:4e:4e:88:ac:e6:dd:65:d8:69:
         72:29:68:af:66:9b:53:76:30:f9:92:fd:60:77:a7:d5:04:cb:
         a2:8c:f9:58:e2:e8:c9:63:1e:29:65:26:15:3b:0c:5c:d3:c6:
         40:a5:49:8d:eb:96:56:04:f6:c9:43:68:25:83:00:04:d8:0e:
         44:4f:be:48:14:31:e0:e8:93:77:b0:82:e9:74:56:7d:60:d2:
         04:eb:76:45:cf:90:c8:79:b9:4f:b7:ac:47:1d:fa:07:3a:b9:
         a3:f9:d5:b9:03:d1:d2:f3:8c:5c:c5:ca:ca:05:52:89:08:a1:
         c8:4a:b2:00:a0:b8:59:1a:03:42:a6:c0:b3:b7:04:5d:a7:f6:
         eb:92:37:d5:95:b9:80:77:e5:56:53:45:d3:31:c3:16:33:07:
         1c:45:4c:9b:1b:7d:f1:d8:cd:ba:45:45:94:b9:02:11:7f:f8:
         1d:8c:29:99:fd:d0:59:df:2d:e4:ea:d5:d0:1d:e5:ce:00:4c:
         6d:43:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:04 2025 by rpki-client